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DECLARATIONS 
SET PRIVILEGE 
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Added $SSDEF. 


ae 


; SYSTEM SERVICE TO SET A PROCESS'S PRIVILEGES 


1 -TITLE SYSSETPRV = SYSTEM SERVICE TO SET PROCESS PRIVILEGES 
¢ IDENT Met 
: Sabeasennendeesnebeonetueneeueeneeneesennsensonnquenenenonnsaneeenenoeneocess 
7* ® 
5 :* COPYRIGHT (c) 1978, 1980, 1982, 1984 BY ® 
:* DIGITAL EQUIPMENT CORPORATION, MAYNARD, MASSACHUSETTS. * 
8 ai ALL RIGHTS RESERVED. ‘ 
11 :* THIS SOFTWARE IS FURNISHED UNDER A LICENSE AND MAY BE USED AND COPIED s 
0 1 :* ONLY IN ACCORDAN NCE WITH THE TERMS OF SUCH LICENSE AND WITH THE * 
13. ;* INCLUSION OF THE ABOVE COPYRIGHT NOTICE. THIS SOFTWARE OR OTHER * 
000 14 ;* COPIES OHEREOF MAY NOT BE PROVIDED OR OTHERWISE MADE AVAILABLE TO ANY * 
000 15 ;* OTHER PERSON. NO TITLE TO AND OWNERSHIP OF THE SOFTWARE IS HEREBY * 
909 1 :* TRANSFERRED. * 
6 ae 
000 18 ;* THE INFORMATION IN THIS SOFTWARE IS SUBJECT TO CHANGE WITHOUT NOTICE * 
000 19 ;* AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY DIGITAL EQUIPMENT * 
4464 Y 3s CORPORATION. * 
P & 
9900 j 3* DIGITAL ASSUMES NO RESPONSIBILITY FOR THE USE OR RELIABILITY OF ITS * 
000 y* SOFTWARE ON EQUIPMENT WHICH IS NOT SUPPLIED BY DIGITAL. * 
0000 4 ie * 
0000 5 ie * 
B58 83 FRR AER EAA eee eee 
0000 8 LEN KAWELL 10-SEP-1979 
0000 9; 
3000 0; : MODIFIED BY: 
000 gi ; V03-004 RSH0093 Scott Hanna 31-Jan-1984 
4 ? ; Remove security sudi ting support. 
900 5 V03-003 RSHO021 R. Scott Hanna 23-May-1983 
44 § ; Add Security Auditing support. 
9000 8 : v0O3-002 wMc54054 Wayne ardoz 22=F EB-1983 
4 3 ; Allow SSSNOTALLPRIV to ys returned if temp flag set. 
208 1 v03-001 KDM0002 Kathleen D. Morse 28-Jun-1982 
0 5 : 
ae 
00 $ ; 


oe a ot at ot ot ot 


SYSSETPRV 
V0e=600 


gvace TO SET PROCESS 


-SBTTL 
; MACRO LIBRARY 


> LOCAL SYMBOLS 


SIND DDD DD PPADS 
MO OODNOA UENO OONOUS Wn" OO 


: ARGUMENT LIST 
0 ENBFLG 
0 PRVADR 
0 PRMFLG 
90 PRVPRV 
00 OWN STORAGE 
00 . .PSECT 
00 
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PRIVILEG 16-SEP-1984 02:34:10 VAX/VMS Macro V04-00 Page SYS 
ate §¢:35:38 SYS.SRCISY SSET PRV.MAR; 1 . d) Tab 
DECLARATIONS 
CALLS 
sPROCESS CONTROL BLOCK 
SPROCESS HEADE 
SPROCESSOR STATUS LONGWORD 
SPRIVILEGES 
SSYSTEM STATUS CODES 
OFFSET DEFINITIONS 
= 4 sENABLE INDICATOR, O=DISABLE, 1=ENABLE 
= 8 [PRIVILEGE MASK ADDRESS 
= 12 RMANENT FLAG, O=TEMPORARY, 1=PERMANENT 
= 16 : PREVIOUS PRIViLeces BUFFER ADDRESS 
YEXEPAGED :PAGED DATA AND CODE 


¥ | 
SYSSETPRV SYSTEM SERVICE TO SET PROCESS PRIVILEG 16-SEP=1984 02:34:10 VAX/VMS Macro v04-00 p SYS 
voe- t BRivivee ~SEET13BS BSisbi38 PANEMES Becca vOsrOO , Page 3 


-SBTTL SET PRIVILEGE 
EXESSETPRV = SET PROCESS PRIVILEGE SYSTEM SERVICE 
THIS SERVICE PROVIDES THE CAPABILITY FOR A PROCESS TO SET ITS PRIVILEGES. 
INPUTS: 


ENBFLG(AP) = —— INDICATOR. 
INDICATES PRIVILEGES ARE TO BE ENABLED. 
Q INDICATES PRIVILEGES ARE TO BE DISABLED. 
PRVADR(AP) = ADDRESS OF A 64-BIT MASK SPECIFYING THE PRIVILEGES TO 
BE ENABLED OR DISABLED. 
PRMFLG(AP) = PERMANENT INDICATOR. 
1 INDICATES PROCESS PERMANENT PRIVILEGES ENABLED/DISABLED. 
Q INDICATES ONLY THE TEMPORARY CURRENT PRIVILEGES. 
PRVPRV(AP) = ADDRESS OF A QUADWORD BUFFER TO REVEIVE THE PREVIOUS 


PRIVILEGE MASK. 
R4 = ADDRESS OF CURRENT PROCESS PCB. 
OUTPUTS: 
RO LOW BIT CLEAR INDICATES FAILURE TO SET PRIVILEGES. 


RO = SS$_ACCVIO = PARAMETER VALUE CANNOT BE READ BY CALLING 
ACCESS MODE. 


SS$_IVSTSFLG - EITHER PRMFLG OR ENBFLG HAVE RESERVED 
BITS SET. 


RO 


RO LOW BIT SET INDICATES SUCCESSFUL COMPLETION. 


RO = SS$_NORMAL - NORMAL COMPLETION, SPECIFIED PRIV 

BISABLED OR ALL SPECIFIED PRIVILEGES ENABLE 

RO = SS$_NOTALLPRIV - SOME PRIVILEGES THAT WERE REQUESTED 
QERE NOT AUTHORIZED AND WERE NOT GRANTED 


PERIPPONIMINIMINIMNINS 2 9 9 OO HQDOODOVDVOOOOOOO0O000 00000009 000009000909 0900 III 


OOO NA ANEW SO OO NOA MEIN SO OOD NAME WIN SO OD NOAU EWN 0 OO WOU EWI OOONOUS 


1 
000 1 
000 1 
000 1 
000 1 
000 1 
000 (1 
000 1 
000 1 
000 1 
0 1 
0 1 
0 1 
$00 | 

007¢ 0000 1 .ENTRY EXESSETPRV,- ;SET PROCESS PRIVILEGES 
1 “M<R2,R3,R4,R5,RO> > (ENTRY MASK) 
55 09000000  9F D 1 MOVL  aMCTL$GL’PHO.RS [GET PROCESS HEADER ADDRESS 
6 C AC D 1 MOVL PRAELGCAB) ,R6 ;GET PERMANENT/TEMPORARY FLAG 
56s FFFFFFFE a D 0D 1 BITL  #*C<1>,R6 SANY BITS BUT DEFINED BIT(S) SET? 
.°°4 BNEG _IVSTSFLG SIF NEQ YES 
> CHECK ACCESS TO PRIVILEGE MASK ARGUMENT 
52. 08 AC 00 -— MOVL = PRVADR(AP) ,R2 7GET PRIVILEGE MASK ADDRESS 
09 1A [IF EQL NONE 
6 7 IFNORD #8,(R2),ACCVIO [CHECK READ ACCESS TO MASK 
52 62 7D MOVQ = (Rd) ,R2 7GET SPECIFIED PRIVILEGES 
> RETURN CURRENT PRIVILEGE MASK, IF DESIRED 
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SYSSETPRV - SYSTEM SERVICE TO SET PROCESS PRIVILEG 1 =Sep- 4: AX/VMS Macro V04-00 Page 4 
v04- SET PRIVIL nt: 1982 88: $3:30 Heys SR SRCISYSSETPRV. MAR; 1 ew 
50 10 ag 09 5 131 5$ MOVL  PRVPRV(AP),RO 7GET PREVIOUS PRIVILEGES BUFFER ADDRESS 
1 1 j BEQL TIF EQL NONE 
3 1 IFNOWRT #8. (RO). ACCVIO SCHECK WRITE ACCESS TO BUFFER 
60 0084 C4 7 134 MOV PCB$Q_PRIV(R4), (RO) SASSUME CURRENT PRIVILEGES DESIRED 
7 56 5 : 135 BLBC SIF LBC CURRENT PRIVILEG ES DESIRED 
60 O0000000'EF 7D ; : MOVG §CTL$GQ_PROCPRIV, (RO) SRETURN PROCESS PERMANENT PRIVILEGES 
08 ACD 40 1 : 10$ TSTL | PRVADR(AP) :CHECK PRIVILEGE MASK ADDRESS 
1 431 BEQL SUCCESS tIF EQL NONE = ALL DONE 
7304 aC £9 0045 140 BLBC = ENBFLG(AP) ,DISABLE SIF LBC DISABLE PRIVILEGES 
O€ 11 49 16) BRB ENABLE SELSE ENABLE PRIVILEGES 
O¢6 168 | : EXIT SERVICE 
048 145 IVSTSFLG: :INVALID STATUS FLAG 
50 017C BF 3¢ 048 146 MOVZWL #SS$_IVSTSFLG,RO SSET FAILURE STATUS 
4 0050 14 RET 
051 148 ACCVIO: sACCESS VIOLATION 
50 (OC ¢ 051 149 MOVZUL S*#SS$_ACCVIO,RO :SET FAILURE STATUS 
0055 151 SUCCESS: ;SUCCESSFUL COMPLETION 
50 01 3¢ 0055 138 MOVZUL S*#SS$_NORMAL ,RO 'SET SUCCESS STATUS 
a Piety : 
0039 138 : ENABLE SPECIFIED PRIVILEGES 
0039 133 ENABLE: sENABLE SPECIFIED PRIVILEGES 
7E 01 3¢ 0059 158 MOVZWL S*#SS$_NORMAL,-(SP) TASSUME SUCCESS 
50 oC O05¢ 159 MOVPSL RO :GET CURRENT PSL 
16 ED O005E 160 #PSLSV “WAS PREVIOUS MODE EXEC OR KERNEL? 
01 50 02 9069 161 PPSL$S- PRVMOD. “RO. MPSLSC EXEC 
1 15 006 16¢ BLEQ 208 sIF LEQ YES - CAN ENABLE ANYTHING 
50 006065 7D 0065 16 MOVQ § PHD$Q_AUTHPRIV(RS),RO :GET AUTHORIZED PRIV ILEGES 
28 50 Og EO 006A 164 BBS #PRVSU_SETPRV,RO,20$ § :IF SETPRV set , CAN ENABLE ANYTHING 
OA 6 E O6F 165 BLBS Roe 10$~ [IF PERMANENT, DON'T GET TMAGE PRIVILEGES 
50 O00&8 CS CB 0071 166 BISL | PHO$Q_IMAGPRIV(RS),RO ADD IMAGE PRIVILEGES 
51 QoeC cS C8 0076 167 BISL  PHDSQ"IMAGPRIV+4(R5).R1 ;.. 
30 0 p 078 168 10$ NCOML RO, RO” [COMPLEMENT AUTHORIZED PRIVILEGES 
52 25 D3 0081 190 BITL RD RD ‘CHECK IF ANY REQUESTED PRIVILEGES 
a. 08 0 6 4 4 BNEG 138 SARE NOT AUTHORIZED 
6E 81 oF i 6 : 178 15$ BOVeUL #SS$_NOTALLPRIV, (SP) sSET ALTERNATE SUCCESS 
38 0 CA p 175 16$:  BICL ROR , ;CLEAR ANY PRIVILEGES NOT AUTHORIZED 
53 51S ; 1% i BICL RI.R ee 
0084 C4 3 C 3 178 "BIS -PCBS$Q_PRIV(R4) :SET CURRENT PRIVILEGES 
0088 C4 ¢ 17 BISL R ta: ubsa-pa vnsk cn 
65 ‘ C AO =: 180 BISL ;PHD$Q~PRIVMSK(R5) ;(SET OTHER COPY TOO) 
04 a5 ¢ AS 181 BISL *PHD$Q~PRIVMSK+4(R5) 
3 E A? é BLBC Re 30S iit “NOT PERMANENT = DONE 
SOE EE Sat 1 Re eitee.eegenyy,, | Av Peni oteh Pnvneces 
0 8ED 8 185 30$:  POPL R : Sadi RETURN STATUS CODE 
04 8 : RET 


sea" ; 


ren: 
! 


000000' EF 
004 "EF 


WOOMOOOO 
—>>rorr>ry 


; DISABLE SPECIFIED PRIVILEGES 


MNOS OR 2NMOO 
OC NOU 


MMOVVOOOooWw 
RS SS ss 
SSSSesesee 
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SYS. SRS 158 ETPRV.MAR; 1 


sDISABLE PRIVILEGES 
SCLEAR CURRENT PRIVILEGES 
(EL 

iF 


EAR IN OTHER COPY TOO) 


F NOT PERMANENT = DONE 
;CLEAR PERMANENT PROCESS PRIVILEGES 


; DONE 


4 
: 
Py 
: 
Py 
: 
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SYSSETPRV = SYSTEM SERVICE TO SET PROCESS PRIVILEG 16-$ 
Symbol table $7 
ACCVIO 00000051 R 
CTLSGL_PHD erterene 8 6 
CTL$GQ_PROCPRIV eeereeee 
pissaye 0) § B 
ENABL he 
ENBFLG = 4 
EXESSETPRYV 0 RG os 
IVSTSFLG ? R 
PCBSQ_PRIV = 8 
PHD$Q-AUTHPRIV 2 
PHD$Q_IMAGPRIV = 
PHD$Q_PRIVMASK = 
PRMFL s ¢ 
he Pe all = 
= 
PRVPRV = 1 
PSLSC_EXEC = 
PSL$S_PRVMOD = 38 ¢ 
PSLS$V_PRVMOD = 01 
SS$_ACCVIO = 000 std: 
SS$_IVSTSFLG = 0000017C¢ 
NORMAL = 944 44 1 
SS$_NOTALLPRIV = B80 1 
SuCcTESS 00000055 R 02 
es + 
! ; Psect “synopsis ! 
PSECT name Allocation PSECT No. Attributes 
, 8 « 00000000 ( } ot 9} NOPIC USR 
SABSS$ 00000000 ( NOPIC USR 
YEXEPAGED QOOO00E1 . 3°} NOPIC USR 
! Performance indicators ! 
Phase Page faults CPU Time Elapsed Time 
Initialization Hy :00.07 :00: 0.41. 
zonnand processing 1 :00.61 :00: 3-38 
s 1 261 :07. § :00:13.9 
Synbo iable sort 0 :01. :00:02.14 
Pas 54 701.24 :00:02.29 
Symbo table output 4 :00.04 :00:00. 
Psect synopsis output :00. :00:00. 
Cross-reference output :00. :00:00. 
Assembler run totals 49 :10. :00:20. 
ing working set Limit wes 1350 pages. 
9396 bytes (77 pages) of virtual memory were used to buffer _the intermediate 
tr re were 50 pages of symbol table 1 8bace al } d to hold 7 be non-local 


source Lines were read in Pass 1 


4 pages of virtual memory were used. 


produc gnd 


ng} object records in Pass 
to detin e 1 


macros. 


EP=1984 02:34:1 AX/VMS Macr 
EP=1984 88: 7:2 SYS.SRCISYS 
CON ABS LCL NOSHR NOEXE 
CON ABS LCL NOSHR’ EXE 
CON REL LCL NOSHR- EXE 


soe. 
local symbols. 


v04-00 P 
SSET PRV.MAR; 1 — Qh) 


NORD NOWRT NOVEC BYTE 
RD WRT NCVEC BYTE 
RD URT NOVEC BYTE 


> wom 


x<xxoHHom = Ht 
mmm =z 2 


C 
C 
E 
E 
INA 
Pp 
R 
$ 
s 


“rum 
nmen-r 
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VAK-11 Macro Run Statistics ~SEP=-1984 SYS.SR 36 


Peewee ocoeeeeoeeseseeeeeeeoes} 


! Macro Library statistics ! 


Gee oooeeeeeeeeocesescescecoee} 


Macro Library name Macros defined 

_8255SDUA SYS.OBJIJLIB cei 1 4 
EET ESYSclesstA STARLET .MLB;2 6 

Torre (all Libraries) 1 


859 GETS were required to define 10 macros. 
There were no errors, warnings or information messages. 
MACRO/LIS=LIS$:SYSSETPRV/OBJ=OBJ$:SYSSETPRV MSRC$:SYSSETPRV/UPDATE=(ENHS:SYSSETPRV) +EXECMLS$/LIB 


ro Vv 
YSSET 


v04-00 
PRV.MAR;1 
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